Summary of Physical Security Mandatory Requirements

Agencies must provide clear direction on physical security through the development and implementation of an agency physical security policy, and address agency physical security requirements as part of the overall agency security plan.

Agencies must have in place policies and protocols to:

• identify, protect and support employees under threat of violence, based on a threat and risk assessment of specific situations.  In certain cases agencies may have to extend protection and support, for example to family members
• report incidents to management, human resources, security and law enforcement authorities, and/or Worksafe NZ as appropriate
• provide information, training and counselling to employees
• maintain thorough records and statements on reported incidents.

Agencies must ensure they fully integrate physical security early in the process of planning, selecting, designing and modifying their facilities.

Agencies must ensure any proposed physical security measure or activity is consistent with relevant health and safety obligations.

Agencies must show a duty of care for the physical safety of members of the public interacting directly with the New Zealand government. Where an agency’s function involves providing services, the agency must ensure clients can transact with the New Zealand government with confidence about their physical wellbeing.

Agencies must implement a level of physical security measures that minimises or removes the risk of information assets being made inoperable or inaccessible, or improperly accessed or used.

Agencies must develop plans and protocols to move up to heightened security levels in case of emergency and increased threat. The New Zealand Government may direct its agencies to implement heightened security levels.